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M M Title- A METHOD FOR EXCHANGING USER-SPECIFIC DATA FROM A MOBILE NETWORK TOA SERVICE APPLI- 
S CATION OF AN EXTERNAL SERVICE PROVIDER USING A UNIQUE APPLICATION USER ID CODE 

S (57) Abstract: A method and apparatus 

for exchanging user-specific data from a 
mobile network (104) to a service application 
(108A1) needing certain user data for 
providing a requested service to a mobile 
user (100). A unique Application User 
Identification (AUID) code is generated and 
assigned to a combination of the mobile user 
and the application. The assigned AUID code 
is then sent to the application. A request 
for the needed user data is received from the 
application together with an AUID code. It 
is then determined whether the application 
is allowed to retrieve the requested user data. 
If so, the requested user data is retrieved 
based on the received AUID code, and is 
sent to the application. The procedure may 
be implemented in a single data control 
server (114), enabbng efficient control and 
communication of user data between a mobile 
network and service applications. 
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A METHOD FOR EXCHANGING USER- SPECIFIC DATA FROM A MOBILE 
NETWORK TO A SERVICE APPLICATION OF AN EXTERNAL SERVICE 
PROVIDER USING A UNIQUE APPLICATION USER ID CODE 



TECHNICAL FIELD 
5 The present invention relates generally to a 

method and apparatus for exchanging potentially sensitive., 
user-specific data from a mobile network to a service 
application of an external service provider. In particular, 
the invention is concerned with controlling and facilitating 
10 the process of providing such data. 

BACKGROUND OF THE INVENTION AND PRIOR ART 

Mobile phones have so far been used mostly for 
making voice calls and for communicating short text 
15 messages, such as SMS (Short Message Service) messages . 

Further, Internet browsing has rapidly become very popular 
and in recent years, the wireless domain and the Internet 
are converging. Mobile terminals are now available, having 
functionality for connecting to the Internet over a wireless 
20 access network to obtain information and services from 
servers located throughout the world. 

Today, work is in progress for developing a 
multitude of new mobile services, which will be possible to 
employ in particular as new technology for mobile 
25 communication is introduced, providing greater network 
capacity and higher transmission bitrates. By way of 
example, GPRS (General Packet Radio Service) and WCDMA 
(Wideband Code Division Multiple/Access) networks are 
currently emerging for enabling wireless data services 
• 30 requiring a wide range of data rates. The contents of the 
new services may include text, images, voice, audio files 
and video files in various different formats and 
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combinations. More sophisticated mobile terminals are also 
becoming available on the market equipped with functions to 
match these new services. 

In particular, mobile instant messaging and 
presence services are rapidly becoming popular. Instant 
messaging is known from the world of fixed desktops, 
including message status reporting and various ' group and 
contact list features. Presence services involve information 
on the location of mobile terminals, and enable users to 
receive messages according to their profile and 
availability. A user profile can be personal and may be 
defined by preferences, interests and hobbies, as well as 
more temporary factors, such as user availability and 
current moods. Messages and content services can also be 
delivered depending on present location, availability and 
the capabilities of the user's mobile terminal. 

A mobile network providing wireless access to 
mobile terminals typically comprises a plurality of base 
stations being connected together by means of switching 
nodes such as Base Station Controllers (BSC) and/or Mobile 
Switching Centres (MSC) . Each base station provides radio 
coverage over an area known as a cell, for communication 
over radio channels with mobile terminals located in the 
cell. The mobile network further comprises a multitude of 
components or nodes for handling traffic and various 
services for terminals, such as, e.g., a user management 
node, a billing centre, a subscription management node and a 
mobile positioning service (MPS) node. Such mobile networks 
are sometimes referred to as "Public Land Mobile Networks" 
30 (PLMNs). 

In order to provide wireless access and specific 
services to users. of the mobile terminals, the mobile 
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network stores user-specific data defining user profiles 
and/or subscription parameters, e.g., as exemplified above. 
Thereby, the mobile network can adapt and customise its . 
services to each user, based on the stored user data. 
Further, many services and applications are provided from 
so-called third party service providers outside the mobile 
network, which will be referred to as "external providers" 
for short in this description. The external providers may 
communicate with mobile terminals over a backbone network, 
such as the Internet, a PSTN (Public Switched Telephony 
Network) or any type of wireless network, and the mobile 
network or PLMN to which the intended terminal is currently 
connected. 

External providers may thus activate service 
applications for providing specific services to mobile 
terminals, typically upon request from a terminal. A service 
■ application may also be triggered without a preceding 

terminal request, such as through a "push" mechanism as used 
for example in the context of WAP (Wireless Application 

20 Protocol) telephony. 

Examples of service applications are mail programs, 
chat programs, content services providing news, weather 
information or stock quotes, and entertainment services for 
jokes, games or the like. Such applications often require 
25 access to certain user data stored in the mobile network, 

for enabling adaptation to specific users. In that case, an 
external provider requests that . such data be retrieved and 
given from the mobile network. When the external provider 
has obtained the necessary information on the user, 
30 application data can be communicated with the mobile 
terminal using the mobile network as a transparent 
"pipeline". . 
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User data stored in a mobile network is available 
to, and can be freely accessed by, components and nodes 
within the mobile network, since these are controlled by the 
mobile network owning the user data. However, difficulties 

5 may arise with respect to privacy when an external provider 
requires access to certain user data in the mobile network 
in order to provide a service to one or more mobile 
terminals. It is then highly desirable" to ensure that the 
external provider is authorised to access the requested user 

10 data before the data is delivered, and to protect sensitive 
user information from unauthorised access. It is also 
desirable to control the exchange of such data in a simple 
and effective way. 

The Parlay 2.1 and 3.0 specifications describe a 

15 proposed solution for providing a standardised interface to 
mobile networks for external service providers. However, the 
solution does not protect user privacy and is highly 
complex. It is thus a problem to exchange user data to 
external service providers in a simple way which protects 

20 user privacy. 

SUMMARY OF THE INVENTION 

The object of the present invention is to reduce 
or eliminate the problems outlined above. This object and. 

25 others are obtained by providing a method and apparatus for 
exchanging user-specific data from a mobile network to a 
service application of an external service provider, wherein 
certain user data is needed by the application for providing 
a requested service to a mobile user. A unique Application 

30 User Identification (AUID) code is generated and assigned to 
a combination of the mobile user and the application. The 
assigned AUID code is then sent to the application. A 
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request for the needed user data is received from the 
application together with an AUID code. It is then 
determined whether the application is allowed to retrieve 
the requested user data. If so, the requested user data is 
5 retrieved based on the received AUID code, and is sent to 
the application. On the other hand, an error message may be 
sent if it is determined that the application is not allowed 
to retrieve the requested user data. 

The inventive procedure may be implemented in a 
10 single data control server having means for performing the 
procedure. User data can then be efficiently controlled and 
communicated between a mobile network and service 
applications. The data control server may include a 
permission table specifying the types of user data that each 
15 service application is allowed to receive from the mobile 
network. The data control server may further include a 
translation table for storing the AUID code together with a 
mobile user identity and an application identity. The data 
control server may further include a translator for 
20 translating AUID codes into mobile user identities and vice 
versa by checking the translation table. 

The data control server may further include code 
generating means being capable of generating new AUID codes 
by dividing the decimal representation of a non-periodic 
25 irrational number into blocks of a certain length, wherein 
each block may be used as an AUID code. 

The inventive procedure may further be executed by 
means of computer program product comprising software code 
means adapted to cause a data control server to perform the 
30 inventive method. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will now be described in more 
detail- and with reference to the accompanying drawings, in 
which: 

- Fig. 1 is a schematic view of a simplified communication 
scenario for exchanging user data to an external provider 
or application. 

- Fig. 2 is a logical block diagram of an exemplary data 
control server. 

- Fig' s 3 and 4 are signalling diagrams for two exemplary 
communication procedures. 

- Fig. 5 is a flow chart illustrating the steps executed in 
a method for exchanging user data according to one aspect 
of the invention. 

DESCRIPTION OF PREFERRED EMBODIMENTS 

A simplified communication scenario is illustrated 
in Fig. 1, where user data can be exchanged according to the 
present invention to a service application of an external 
provider. A mobile terminal 100 operated by a mobile user is 
connected to a base station 102 of a mobile network 104 by 
means of a radio air interface. The mobile network 104 uses 
standardised communication protocols, such as any of those 
defined for GSM, TDMA, GPRS, UMTS, etc, for transmission of 
speech and data over the air interface as well as within the 
network. TCP/IP is also commonly used within mobile 
networks . 

A gateway 10 6 in the mobile network 104, provides 
connection for mobile terminals to external providers 108 
being connected to a backbone network 110, such as the 
Internet. The gateway 106 may act as a service portal to 
mobile terminals for connection to specific external 
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providers. Furthermore, each external provider 108 comprises 
one or more service applications for executing specific 
services. In Fig. 1, three service applications 108A1-3 are 
shown as logical entities at- the external provider 10BA. 

Various mobile services are available from external 
providers 108 by connecting to servers of the external 
providers, where the services reside typically as computer 
programs and data files. An external provider may have one 
or more physical server entities or a server system for 
executing any number of service applications. A physical 
s-e-rver entity may also be shared by plural external 
providers. Services may also be provided by multiple 
external providers. In the following description, the term 
"external provider" represents any combination of physical 
server entities providing a single access point in the 
perspective of mobile terminals. 

The mobile network 104 further comprises a user 
data base 112 in which user-specific data is stored for 
mobile users being registered in the mobile network 104. For 
example, the stored user data may be related to more or less 
static factors such as capabilities of the user' s mobile 
terminal and predefined QoS (Quality of Service) parameters, 
e.g., depending on a subscription, as well as preferences 
and interests as specified by the user. User data may also 
25 be stored concerning more dynamic factors, such as current 
user availability and moods and the present location of the 
terminal. Furthermore, the user data base 112 may also hold 
certain user data which is stored temporarily for visiting 
users not belonging to the mobile network 104. 
30 when an external provider shall provide a specific 

service to a mobile user, an application of the service may 
require specific user data in order to be executed. The user 
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data is therefore requested from the user data base 112 by 
the application. However, requested user data may contain 
information on the user which is private and/or secret and 
should not be exchanged to anyone requesting the information 
without control. It is thus desirable to protect the privacy 
or anonymity of users. The present invention provides a 
simple and reliable solution for obtaining such control -of 
data exchange. 

For this purpose, the mobile network 104 comprises 
a data control server 114 acting as an interface towards the 
external providers 108 and their applications, for handling 
requests for specific user data in the mobile network 104. 
The data control server 114 controls the exchange of user 
data and is preferably the only point of contact for making 
such requests by the external providers 108. 

An exemplary procedure for exchanging user data 
will now be described with reference to Fig. 1. When a user 
of the mobile terminal 100 wants to make use of one or more 
mobile services, a suitable command is entered into the 
mobile terminal 100 by the user. In response to the entered 
command, the mobile terminal 100 sends a service request to 
the gateway 106, which acts as a portal for obtaining the 
service. The gateway 106 then forwards the service request 
to the data control server 114 which recognises in this case 
that the user has not accessed this particular service 
before . 

The data control server 114 then generates a unique 
Application User Identification (AUID) code representing the 
combination of a specific user and a specific service 
application corresponding to the requested service. The AUID 
code is stored together with a mobile user identity such as 
an MSISDN (Mobile Subscriber ISDN number) used in GSM 
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networks, and an application identity such as a name. In 
practice, an identity code of either a user subscription or 
a physical terminal may be used as the mobile user identity. 

Thus, a list of AUID codes for different service 
applications may be stored in the mobile network 104 for 
each user. Next, the data control server 114 sends the 
service request and the generated AUID code over the 
backbone network 110 to a service application 108A1 
corresponding to the requested service. 

After receiving the service request, the service 
application 108A1 may recognise that certain user-specific 
data is needed for providing the requested service. For 
example, such user data may be needed for adapting the 
service according to user preferences and/or terminal 
capabilities.. In that case, the service application 108A1 
sends a request for- the needed user data to the data control 
server 114 of the mobile network 104. The received AUID code 
is also included in the data request. 

The data control server 114 then determines whether 
this particular application 108A1 is authorised to receive 
the requested user data, which will be described in more 
detail later, and may retrieve the data from the user data 
base 112 and send it to the application accordingly. 
Alternatively, the service application 108A1 may not need 
25 any user data from the user data base 112 for the first 

service request from the mobile user. The service can then 
be executed without requesting user data from the mobile 
network 104. 

The AUID code has now been stored in the mobile 
30 network 104 and is also known to the corresponding service 

application 108A1 as being stored locally by the application 
108A1 together with any available user data. Hence, the AUID 
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code can be used hereafter upon any subsequent access of the 
user to the same service. In other words, the data control 
server 114 may pass the AUID code with a new service request 
from the user on a later occasion to the service application 
108A1, which then can attribute the previously received user 
data to the service, if it was locally stored. 

The service application 108A1 can also send a 
request to the data control server 114 for further user data 
including the AUID code, such as "where is the user 
currently located having AUID xxx?". The data control server 
114 can then obtain the corresponding mobile user identity 
from the stored AUID code list for retrieving the requested 
information from the user database 112. The server 114 may 
then decide whether to grant this request or not, depending 
on whether the application is authorised to receive the 
requested type of data, and further depending on, e.g., 
stored user preferences. 

Fig. 2 is a logical block diagram of an embodiment 
of the data control server 114 shown in Fig. 1. The data 
control server 114 comprises a mobile network interface 200 
for communication with the mobile network 104, and an 
external provider interface 202 for communication with 
service applications in external providers 108, such as the 
service application 108A1. A central logic unit 204 is 
connected to the interfaces 200, 202 for executing the 
process described below. The logic unit 204 is further 
connected to an AUID code generator 206, a translator 208 
and a permission table 210. The translator 208 includes a 
translation table 212. 

The mobile network interface 200 is configured to 
receive service requests from mobile users and may retrieve 
user data from the user data base 112, e.g. using a 
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communication protocol normally used in the mobile network 
104. The external provider interface 202 is configured to 
receive requests for user data from service applications and 
may respond with either the requested data or an appropriate 

5 error message. 

The AUID code generator 206 is configured to 
generate new unique AUID codes using one or more suitable 
algorithms, ensuring that a new code has not been used 
before. It is also important that the generated codes cannot 
10 be derived and reproduced by any unauthorised party. A code 
should therefore be sufficiently long and not have any 
regular pattern. For example, algorithms may be used which 
are previously known in pseudo-random number generators 
offered in most programming languages, such as Java and C++. 
15 It is then common programming practice to use current time 
as seed for the generator to avoid any regularity. 

It is also possible to generate new AUID. codes by 
using a non-obvious irrational number, such as the square 
root of 57,20938763 or the like, for which the decimal 
20 representation is non-periodic . .The decimal representation 
can be divided into blocks of a certain length, such as 50 
digits. Each block is then most likely unique and may be 

used as an AUID code. 

The translator 208 containing the translation table 
25 212 is configured to translate AUID codes into mobile user 

identities and vice versa. The table 212 comprises a list of 
AUID codes for different user/application combinations, 
where the users are preferably specified by corresponding 
identities as being valid in the mobile network 104. An 
30 exemplary translation table 212 is shown below: 
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AUID 


Mobile user ID 


Application 


XXX 


+46 111 222 


Al 


yyy 


+46 111 222 


A2 


zzz 


+46 333 444 


Al 


vw 


+46 333 444 


A2 



It should be noted that each user may have several 
AUID codes, one for each application it has accessed. 

The permission table 210 specifies the types of 
user data that each service application is allowed to 
receive from the mobile network. This table is checked 
before granting a user data request from an application. An 
exemplary permission table 210 is shown below: 



Application 


Allowed user data 


Al 


Current location. 


A2 


Current location, prepaid account status. 


A3 


Prepaid account status . 


A4 


Current location, current mood. 



A permission table 210 may be maintained for a 
specific user or group of users, or may be valid for all 
subscribers belonging to the mobile network 104. The table 
content may further have been negotiated with the external 
provider controlling each application. There may also be a 
minimum set of permissions that is automatically allowed to 
all service applications, such as for mobile terminal 
capabilities and subscription-based QoS parameters. 

Fig's 3 and 4 illustrate signalling diagrams for 
exemplary communication procedures using the present 
invention. These will now be described with further 
reference to Fig. 2. 'It should.be noted that some or all 
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messages to and from the data control server 114 may in 
practice be transmitted over a service portal or the like- of 
the mobile network 104, such as the gateway 106 in Fig. 1. 
in Fig. 3, a mobile terminal 100 accesses a 
5 service application 108A1 for the first time. In a first 

step 300, the terminal 100 sends a service request SR to the 
mobile network which is forwarded to the data control server 
114 and received in the mobile network interface 200 
residing therein. The logic unit 204 identifies the mobile 
,0 user and the application 108A1 corresponding to the received 
service request. It is then recognised by the translator 208 
that no AUID exists for this particular user /application 
combination, by checking the translation table 212. The AUID 
code generator 206 is then ordered to generate a new AUID 
15 code, which is assigned to this user/application combination 
and stored in the translation table 212. 

Next in a step 302, the service request is sent 
with the AUID code to the application 108A1. The application 
108Althen determines in this case that specific user data 
20 is needed to provide the requested service, and therefore 

sends a user data request UDR and the AUID code to the data 
control server 114 in a step 304, which are received in the 
external provider interface 202 of the server 114 . It is 
then checked in the permission table 210 whether the 
25. application 108A1 is allowed to receive the requested user 
data. If so, the requested user data is retrieved from the 
user database 112 and the user data UD is sent to the 
application 108A1 in a step 306. If the application 108A1 is 
■ not allowed to receive the requested user data, or if the 
30 application 108A1 is not registered at all, an appropriate 
error message E may be' sent in an alternative step 308, or 
no response is sent at all. Finally, if the application 
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108A1 has received the user data, it can execute the 
requested service as indicated in a .step 310, e.g. by 
sending payload data to the mobile terminal 100. 

In Fig. 4, a mobile terminal 100 accesses the 

5 service application 108A1 again at a later occasion by 

sending a new service request SR in a first step 400, which 
is received in the data control server 114. The logic unit 
204 then identifies the mobile user and the application 
108A1 as in the example above, and the previously assigned 

10 AUID code is retrieved from the translation table 212 by the 
translator 208. In a next step 402, the. service request SR 
and the AUID code are sent to the application 108A1. It is 
then possible for the application 108A1 to attribute the 
previously received user data to the service, if it has been 

15 locally stored. If no further user data is needed, the 
application 108A1 can execute the requested service as 
indicated in a step 404. If more data is needed, such as a 
current location or a prepaid account status, the steps 304- 
310 in Fig.. 3 may be executed again, as described above. 

20 Th e processes of retrieving needed user data and 

delivering a requested service are thereby simplified and 
can be controlled by the mobile network for ensuring user 
privacy. 

Fig. 5 is a flow chart illustrating the procedure 
25 executed in the data control server 114 when a user data 
request is received from a service application of an 
external provider. The user data request is received 
together with an AUID code in a first step 500, 
corresponding to step 304 in Fig. 3. An authentication 
30 routine may optionally be performed in connection with step 
500. Next in a step 502, it is determined whether the 
application is allowed to retrieve the requested user data, 
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by checking the permission table 210. If not, an error 
message is sent to the application in a step 504, or 
alternatively, no response is given at all. If the request 
is granted, the received AUID code is translated into a 
mobile user identity in a step 506, by checking the 
translation table 212. 

Next,' it is determined in a step 508 whether a 
valid mobile user identity was found in step 506 in order to 
check if the application is authorised. This check provides 
additional security since only an authorised application can 
know a valid AUID code. If not found, an error message is 
sent to the application in a step 510. Otherwise, the 
requested user data is retrieved from the user database 112 
and is sent to the application in a final step 512. 

By using the described invention, a simple and 
reliable procedure is obtained for exchanging user data to 
service applications of external providers, enabling 
efficient control and communication between a mobile network 
and the applications. Access to user data is controlled by 
a single component, the data control server 114, which thus- 
may act as a firewall. Hence, sensitive user information can 
be protected from unauthorised access. 

By using the unique AUID codes in service requests 
according to the present invention, an unauthorised 
25 application cannot impersonate an authorised application to 
fraudulently obtain user data. Also, users are automatically 
authenticated towards the. applications by the AUID codes and 
no exchange of usernames and passwords is necessary between 
users and applications. Therefore, applications designed to 
30 be accessed over the Internet can easily be adapted for 
access via a data control server 114 as described above. 
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While service applications are forced to direct 
user data requests to a data control server 114 for initial 
control, the mobile network can still be used as a 
"Pipeline" for communicating application data when 
delivering the service, without further involving the data 
control server 114 . 

In practice,- the invention is preferably 
implemented as software code means in a computer program 
product adapted to cause a data control server 114 to 
perform the inventive method, such as the above-described 
processes. It should be noted that the functional units 200- 
212 in Fig. 2 are merely logically represented and may be 
implemented as software in one or more processors or the 
like anywhere in the server 114. In an alternative 
embodiment, the logic unit 204 may for example be integrated 
with the interfaces 200, 202. In another embodiment, the 
logic unit 204, the AUID code generator 206 and the 
translator 208 may be integrated into a single functional 
unit. Furthermore, the permission table 210 and the 
translation table 212 may be stored in a memory within or 
outside the data control server 114. 

While the invention has been described with 
reference to specific exemplary embodiments, the description 
is only intended to illustrate the inventive concept and 
should not be taken as limiting the scope of the invention. 
Various alternatives, modifications and equivalents may be 
used without departing from the spirit of the invention., 
which is defined by the appended claims. 
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CLAIMS 

1. A method of exchanging user-specific data from a mobile 
network to a service application of an external service 
provider, wherein certain user data is needed by the 
application for providing a requested service to a mobile 
user, characterised by the following steps: 

- A) generating a unique Application User Identification 

(AUID) code which is assigned to a combination of the 
mobile user and the application, 

- B) sending the assigned AUID code to the application, 

- C) receiving from the application a request for the 
needed user data together with an AUID code, 

- D) determining whether the application is allowed to 
retrieve the requested user data, and if so 

- E) retrieving the requested user data based on the 
received AUID code and sending the user data to the 
application . 

2. A method according to claim 1, characterised in that the 
AUID code is generated in step A) in response to 
receiving a service request from a mobile user. 

3. A method according to claim 1 or 2, characterised in that 
the AUID code is stored in a translation table together 
with a mobile user identity and an application identity. 

4. A method according to claim 3, characterised in that the 
mobile user identity is obtained from the translation 
table based on the AUID code received in step C) , for 

■ retrieving the requested user data in step E) from a user 
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data base in which user-specific data is stored for 
mobile users being registered in the mobile network. 

5. A method according to any of claims 1 - 4, characterised 
5 in that the AUID code is used by the application for 

attributing the user data sent in step E) , to the service 
upon subsequent access of the mobile user to the same 
service. 

10 6. A method according to any of claims 1-5, characterised 

in that the determining step D) is performed by checking 
a permission table specifying the types of user data that 
each service application is allowed to receive from the 
mobile network. 

15 

7. A method according to claim 6, characterised in that a 
permission table is maintained for a specific user or 
group of users. 

20 8. A method according to claim 6 or 7 , characterised in that 
an error message is sent if it is determined in step D) 
that the application is not allowed to retrieve the 
requested user data. 

25 9. A method according to any of claims 1-8, characterised 
in that new AUID codes are generated by dividing the 
decimal representation of a non-periodic irrational 
number into blocks of a certain length, wherein each 
block is used as an AUID code. 



10. A method according to any of claims 1-9, characterised 
by the step of determining whether a valid mobile user 
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identity exists that corresponds to the AO ID code 
received in step C) in order to check if the application 
is authorised. 

11. A data control server for exchanging user-specific data 
from a mobile network to a service application of an 
external service provider, wherein certain user data is 
needed by the application for providing a requested 
service to a mobile user, characterised by: 

- means for generating a unique Application User 
Identification (AUID) code which is assigned to a 
combination of the mobile user and the application, 

- means for sending the assigned AUID code to the 
application, 

- means for receiving from the application a request for 
the needed user data together with an AUID code, 

- means for determining whether the application is allowed 
to retrieve the requested user data, and 

- means for retrieving the requested user data based on a 
received AOID code and sending the user data to the 
application. 

12. A server according to claim 11, characterised by a 
permission table specifying the types of user data that 

5 each service application is allowed to receive from the 

mobile network. 

13. A server according to claim 11 or 12, characterised by a 
translation table for storing the AUID code together with 

30 a mobile user identity and an application identity. 
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14. A server according to claim 13, characterised by a 
translator for translating AUID codes into mobile user 
identities and vice versa by checking the translation 
table. 

15. A server according to any of claims 11-14, 
characterised in that the code generating means is 
capable of generating new AUID codes by dividing the 
decimal representation of a non-periodic irrational 
number into blocks of a certain length, wherein each 
block is used as an AUID code. 

16. A server according to any of claims 11 - 15, 
characterised by a mobile network interface for receiving 
service requests from mobile users, and for retrieving 
user data. 

17. A server according to any of claims 11 - 16, 
characterised by an external provider interface for 
receiving requests for user data from service 
applications, and for responding with either the 
requested data or an appropriate error message. 

18. A computer program product comprising software code means 
adapted to cause a data control server to perform the 
method of any of claims 1-10. 
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